Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/TTBErUL6vl3lSqjsByIpaDDgE6U.roa
File: TTBErUL6vl3lSqjsByIpaDDgE6U.roa (raw, json)
Hash identifier: 4weVW558ecVuX1Zae4lOHzv/p4kGkETVv2eYyWWuW94=
Subject key identifier: 4D:30:44:AD:42:FA:BE:5D:E5:4A:A8:EC:07:22:29:68:30:E0:13:A5
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0198AD4124101E533B9D6587963228DB572B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/TTBErUL6vl3lSqjsByIpaDDgE6U.roa
Signing time: Fri 15 Aug 2025 10:23:04 +0000
ROA not before: Fri 15 Aug 2025 10:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 2a09:da40::/32 maxlen: 32
2a0d:adc4::/32 maxlen: 32
2a11:3d01::/32 maxlen: 32
2a12:3cc1::/32 maxlen: 32
2a14:9705::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:41:24:10:1e:53:3b:9d:65:87:96:32:28:db:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Aug 15 10:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d3044ad42fabe5de54aa8ec0722296830e013a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:69:07:a5:ae:01:e0:4e:11:78:fe:07:57:
4c:19:0e:ca:39:28:da:00:b8:6a:18:1b:0f:3d:fd:
f0:86:ed:ac:3b:cc:ee:dd:24:85:56:00:01:49:46:
a2:4c:f0:6d:f5:4f:8f:3d:c1:02:d2:d2:57:9e:90:
c6:be:3b:ec:9f:9c:b0:7b:24:cd:c5:21:2b:54:79:
03:1f:7b:cc:db:88:3f:f2:38:79:23:c0:5c:f8:c3:
9a:5b:d0:96:2b:9e:8d:66:11:b5:11:92:94:3e:f2:
b4:bc:76:40:df:a3:51:a1:b1:59:73:d1:d3:07:20:
c6:b7:d6:af:a6:28:e5:df:82:a1:95:19:3f:44:17:
9c:72:71:82:a9:57:96:92:52:26:3e:17:54:ee:c3:
ee:c8:89:ad:b5:1c:a6:11:d5:b7:a7:72:20:4c:26:
0a:2c:57:9f:b9:39:3b:99:2b:42:ba:83:fc:d8:57:
7a:68:95:cb:7b:82:86:ad:4e:fb:71:e6:2d:cc:7d:
31:de:25:26:c2:da:ce:08:0e:fd:9e:1e:9b:a9:7d:
8b:a5:60:ea:d1:46:93:72:b4:75:df:95:25:47:6f:
d1:c5:5f:88:84:44:64:63:5d:48:ce:2e:c2:98:97:
68:31:20:fe:81:f4:49:df:36:10:d0:8b:70:50:f2:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:44:AD:42:FA:BE:5D:E5:4A:A8:EC:07:22:29:68:30:E0:13:A5
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/TTBErUL6vl3lSqjsByIpaDDgE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da40::/32
2a0d:adc4::/32
2a11:3d01::/32
2a12:3cc1::/32
2a14:9705::/32
Signature Algorithm: sha256WithRSAEncryption
3e:a6:79:8f:a9:96:85:f7:5e:2e:77:92:76:72:92:43:3e:3d:
c3:18:c8:03:26:0e:01:a3:47:f0:41:64:5b:8a:6a:34:99:f4:
60:c1:dd:4c:0c:6d:ce:b7:41:ae:b8:45:5e:0e:aa:95:1f:d7:
a1:7e:81:52:bb:72:0e:0e:54:22:c2:58:8d:5a:39:4a:66:ea:
5b:a0:4e:a6:a1:8f:48:ed:ac:1c:95:43:0b:9d:9f:41:0e:8d:
86:81:0d:ad:8a:2d:13:9f:29:b4:67:31:a2:28:6a:f3:0f:f3:
71:af:67:17:1e:7f:7e:a4:94:99:23:dd:f5:d2:b1:95:83:4e:
52:63:98:b1:76:65:7c:b9:32:5a:c6:ed:47:12:aa:f3:2f:f6:
a3:24:99:97:24:e0:85:d3:01:d5:68:8a:32:0e:91:60:ed:b9:
b0:60:69:0b:3b:31:1e:33:76:de:b7:70:3f:b0:f2:be:b5:e8:
bd:2c:64:4d:58:5e:f7:30:e1:83:cc:24:64:3c:12:62:31:f2:
7c:f1:2a:e8:89:bc:3c:5e:82:10:4d:b5:55:fe:98:0a:de:18:
8e:30:ff:c6:79:36:f5:21:ce:82:53:4b:33:bc:da:36:13:dc:
5d:06:9b:21:92:17:ed:d3:fe:e1:09:15:59:77:ed:88:03:c7:
29:51:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:37 2025 by rpki-client